• Tutorials & Help

Conducting a privileged I-9 internal audit

A “privileged I-9 audit” is an internal Form I-9 review conducted by or under the explicit direction of legal counsel. Conducting the audit under the supervision of the company lawyers can shield internal communications from disclosure to Immigration and Customs Enforcement (ICE).

However, it is critical to understand that this privilege applies strictly to legal advice, internal reports, and private correspondence regarding the audit. It does not protect the underlying Form I-9s or payroll records themselves, which you are legally obligated to hand over to ICE upon receiving a Notice of Inspection (NOI).

The scope of a privileged audit and how it functions under federal enforcement guidelines involves specific parameters.

What is Protected (The Shield)

When an immigration compliance attorney or employment lawyer structures and oversees an internal self-audit, the Attorney-Client Privilege and the Attorney Work Product Doctrine protect the analytical documents generated during the review. This typically shields:

  • Internal audit logs and worksheets mapping out identified omissions, discrepancies, or missing dates.
  • Email correspondence between Human Resources and legal counsel discussing non-compliance, system errors, or systemic vulnerabilities.
  • Legal summaries and risk assessments outlining potential civil or criminal exposure.

Why this matters: If ICE issues an NOI or administrative subpoena, they may request broad corporate information. Without legal privilege, internal memos admitting to compliance failures or acknowledging that certain employees may lack authorization could be subpoenaed and used by ICE as evidence of a “knowing” or “willful” violation, escalating minor civil penalties into severe criminal liabilities.

What Must Still Be Disclosed (The Target)

The privilege cannot be used to withhold primary employment records. If ICE serves an NOI, the employer is legally mandated under 8 C.F.R § 274a.2(b)(2)(ii) to produce the following items within three business days:

  • All active Forms I-9 and qualifying terminated employee Forms I-9.
  • Retained copies of identity and employment authorization documents (if the company has a standard practice of making copies).
  • Corresponding business documents, including payroll records, active/terminated employee rosters, and business licenses.

Strict Operational Requirements

Simply copying an attorney on an email or hiring a standard third-party vendor does not create a privileged audit. To withstand a government challenge, the audit must adhere to strict guidelines:

  1. Clear Engagement: The legal counsel must be officially retained to provide legal advice regarding I-9 compliance, rather than just routine business administrative services.
  2. Attorney Direction: The attorney must directly oversee the audit, define its scope, and dictate the neutral, non-discriminatory criteria used to select files.
  3. Strict Labeling: All internal audit documents, draft spreadsheets, and communications must be explicitly marked as “CONFIDENTIAL — ATTORNEY-CLIENT PRIVILEGED & ATTORNEY WORK PRODUCT”.
  4. No Waiver: The findings must not be shared with third parties or general employees, as doing so completely destroys the legal privilege.

Strategic Benefits of Proactive Auditing

Conducting a privileged internal audit well before an ICE agent knocks on your door acts as a major risk mitigator:

  • The Cure Advantage: Correcting clerical errors proactively allows you to resolve mistakes before an NOI is served. Under strict ICE enforcement guidelines, many technical and procedural errors can transform into severe, un-curable substantive violations once an official inspection begins.
  • Good-Faith Defense: Demonstrating a pattern of routine, structured internal self-audits shows a “good-faith” effort to comply with the Immigration and Nationality Act (INA). If ICE later discovers violations, a documented history of good-faith self-correction can be used by counsel to negotiate significantly lower monetary fines or avoid criminal prosecution.

 

Now, the required disclaimer: We are an Employer Agent of the E-Verify program and Form I-9 consultant. We are NOT the E-Verify program nor any government agency. Although we are very experienced in the law and regulations regarding Form I-9, the information that we have provided is not legal advice, neither expressed nor implied. You should consult with legal counsel or the appropriate government agency before acting on this information or for any employment law matter. Our assistance to you today does not create an agency or other business relationship where one does not already exist.

This article may have been written with the assistance of AI. While we have made every effort to verify the information presented, it may contain errors. You should independently verify this and any other article published at our site.